Unfortunately, I don't know. I was out sick all last week and haven't
had a chance to get back together with XStop on this. The below
doesn't look familiar to me. :(
> -------------------------------
> > >add filter xstop.sec
> > >set filter xstop.sec 1 permit 0.0.0.0/0 0.0.0.0/0 tcp dst eq 20
> > >set filter xstop.sec 2 permit 0.0.0.0/0 0.0.0.0/0 tcp dst eq 21
> > >set filter xstop.sec 3 permit 0.0.0.0/0 0.0.0.0/0 tcp dst eq 80
> > >set filter xstop.sec 4 permit 0.0.0.0/0 0.0.0.0/0 tcp dst eq 119
> > >add sa xstop
> > >set sa xstop mode ipip-tunnel
> > >set sa xstop peer-identifier [IP ADDRESS of R2000]
> > >add sec-prof xstop
> > >set sec-prof xstop 1 policy-filter xstop.sec
> > >set sec-prof xstop 1 static-sa xstop
--Dale E. Reed Jr. Emerald and RadiusNT__________________________________________IEA Software, Inc. www.iea-software.com
For more information about this list (including removal) go to:http://www.iea-software.com/support/maillists/liststart